[Secure-testing-commits] r11778 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2009-05-04 20:16:14 +0000 (Mon, 04 May 2009)
New Revision: 11778

Modified:
   data/CVE/list
Log:
CVE-2008-5519 likely affects etch version of libapache-mod-jk, but this needs to be checked


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2009-05-04 20:10:46 UTC (rev 11777)
+++ data/CVE/list	2009-05-04 20:16:14 UTC (rev 11778)
@@ -6259,6 +6259,8 @@
 	NOT-FOR-US: AhnLab V3
 CVE-2008-5519 (The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat ...)
 	- tomcat5.5 <unfixed> (bug #523054)
+	- libapache-mod-jk <removed>
+	NOTE: TODO check whether libapache-mod-jk in etch is vulnerable
 CVE-2008-5518 (Multiple directory traversal vulnerabilities in the web administration ...)
 	- geronimo <itp> (bug #481869)
 CVE-2008-5517 (The web interface in git (gitweb) 1.5.x before 1.5.6 allows remote ...)